UBUNTU-CVE-2014-0118

Advisory lineage Upstream: 1 Downstream: 1
Upstream
Downstream
Published: 20 Jul 2014, 00:00
Last modified:22 Apr 2026, 09:27

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

20 Jul 2014, 00:00
Published
Vulnerability first disclosed
22 Apr 2026, 09:27
Last Modified
Vulnerability information updated

Description

The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.

Affected Systems

  • ubuntuapache2

    < 2.4.7-1ubuntu4.1

References (4)